Long searching time and Yellow Status in Elastic Search

Elastic Stack Elasticsearch
1

Hi team,

I was using Elastic Search version 7.14.1. Recently it is found that the searching time increased and when I looked into the health of the Elasticsearch, the status is yellow. If there is any ways to resume the status to green and increase the performance of searching?

Please find the below output of

  • GET /_cat/health?v
    epoch timestamp cluster status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent
    1753775129 07:45:29 elasticsearch yellow 1 1 40 40 0 0 40 0 - 50.0%

  • GET /_cat/indices?v
    health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
    yellow open xxx1 uuid1 1 1 306222 23 46.7mb 46.7mb
    yellow open xxx2 uuid2 1 1 73 0 28.6kb 28.6kb
    yellow open xxx3 uuid3 1 1 0 0 208b 208b
    yellow open xxx4 uuid4 1 1 44 0 22.5kb 22.5kb
    yellow open xxx5 uuid5 1 1 5508752 43 877.7mb 877.7mb
    yellow open xxx6 uuid6 1 1 51 0 34.2kb 34.2kb
    yellow open xxx7 uuid7 1 1 6216 0 1.1mb 1.1mb
    yellow open xxx8 uuid8 1 1 49 0 37.2kb 37.2kb
    yellow open xxx9 uuid9 1 1 796410 0 122.5mb 122.5mb
    yellow open xxx10 uuid10 1 1 40815 0 10mb 10mb
    yellow open xxx11 uuid11 1 1 7294 0 1.1mb 1.1mb
    yellow open xxx12 uuid12 1 1 7353 0 1.4mb 1.4mb
    yellow open xxx13 uuid13 1 1 68 0 131.3kb 131.3kb
    yellow open xxx14 uuid14 1 1 19257 23 28.5mb 28.5mb
    yellow open xxx15 uuid15 1 1 95865 0 17.2mb 17.2mb
    yellow open xxx16 uuid16 1 1 0 0 208b 208b
    yellow open xxx17 uuid17 1 1 2 0 17.6kb 17.6kb
    yellow open xxx18 uuid18 1 1 242246 40 30mb 30mb
    yellow open xxx19 uuid19 1 1 11279550 264 2.7gb 2.7gb
    yellow open xxx20 uuid20 1 1 10727 0 7.2mb 7.2mb
    yellow open xxx21 uuid21 1 1 43769 2 25.7mb 25.7mb
    yellow open xxx22 uuid22 1 1 1897147 71 455.8mb 455.8mb
    yellow open xxx23 uuid23 1 1 1 0 13.7kb 13.7kb
    yellow open xxx24 uuid24 1 1 136966 0 48.2mb 48.2mb
    yellow open xxx25 uuid25 1 1 69036 0 18.6mb 18.6mb
    yellow open xxx26 uuid26 1 1 153032 15 12.6mb 12.6mb
    yellow open xxx27 uuid27 1 1 6 0 16.6kb 16.6kb
    yellow open xxx28 uuid28 1 1 57 0 43.6kb 43.6kb
    yellow open xxx29 uuid29 1 1 236454 0 39.2mb 39.2mb
    yellow open xxx30 uuid30 1 1 8 0 19.4kb 19.4kb
    yellow open xxx31 uuid31 1 1 481 0 470.7kb 470.7kb
    yellow open xxx32 uuid32 1 1 3 0 16.2kb 16.2kb
    yellow open xxx33 uuid33 1 1 0 0 208b 208b
    yellow open xxx34 uuid34 1 1 3197 1 592.7kb 592.7kb
    yellow open xxx35 uuid35 1 1 2453758 69 394.5mb 394.5mb
    yellow open xxx36 uuid36 1 1 4 0 38kb 38kb
    yellow open xxx37 uuid37 1 1 94785 3 53.2mb 53.2mb
    yellow open xxx38 uuid38 1 1 19 0 23.8kb 23.8kb
    yellow open xxx39 uuid39 1 1 73 0 36.8kb 36.8kb
    yellow open xxx40 uuid40 1 1 0 0 208b 208b

  • GET /_cat/shards?v
    index shard prirep state docs store ip node
    xxx7 0 p STARTED 6216 1.1mb xx.xx.xx.xx SVR1
    xxx7 0 r UNASSIGNED
    xxx9 0 p STARTED 796411 123.8mb xx.xx.xx.xx SVR1
    xxx9 0 r UNASSIGNED
    xxx36 0 p STARTED 4 38kb xx.xx.xx.xx SVR1
    xxx36 0 r UNASSIGNED
    xxx20 0 p STARTED 10727 7.2mb xx.xx.xx.xx SVR1
    xxx20 0 r UNASSIGNED
    xxx14 0 p STARTED 19258 28.5mb xx.xx.xx.xx SVR1
    xxx14 0 r UNASSIGNED
    xxx13 0 p STARTED 68 131.3kb xx.xx.xx.xx SVR1
    xxx13 0 r UNASSIGNED
    xxx3 0 p STARTED 0 208b xx.xx.xx.xx SVR1
    xxx3 0 r UNASSIGNED
    xxx31 0 p STARTED 481 470.7kb xx.xx.xx.xx SVR1
    xxx31 0 r UNASSIGNED
    xxx24 0 p STARTED 136966 48.2mb xx.xx.xx.xx SVR1
    xxx24 0 r UNASSIGNED
    xxx29 0 p STARTED 236455 39.3mb xx.xx.xx.xx SVR1
    xxx29 0 r UNASSIGNED
    xxx17 0 p STARTED 2 17.6kb xx.xx.xx.xx SVR1
    xxx17 0 r UNASSIGNED
    xxx33 0 p STARTED 0 208b xx.xx.xx.xx SVR1
    xxx33 0 r UNASSIGNED
    xxx2 0 p STARTED 73 28.6kb xx.xx.xx.xx SVR1
    xxx2 0 r UNASSIGNED
    xxx1 0 p STARTED 306222 46.7mb xx.xx.xx.xx SVR1
    xxx1 0 r UNASSIGNED
    xxx23 0 p STARTED 1 13.7kb xx.xx.xx.xx SVR1
    xxx23 0 r UNASSIGNED
    xxx27 0 p STARTED 6 16.6kb xx.xx.xx.xx SVR1
    xxx27 0 r UNASSIGNED
    xxx21 0 p STARTED 43769 25.7mb xx.xx.xx.xx SVR1
    xxx21 0 r UNASSIGNED
    xxx22 0 p STARTED 1897148 455.8mb xx.xx.xx.xx SVR1
    xxx22 0 r UNASSIGNED
    xxx32 0 p STARTED 3 16.2kb xx.xx.xx.xx SVR1
    xxx32 0 r UNASSIGNED
    xxx26 0 p STARTED 153032 12.6mb xx.xx.xx.xx SVR1
    xxx26 0 r UNASSIGNED
    xxx34 0 p STARTED 3197 592.7kb xx.xx.xx.xx SVR1
    xxx34 0 r UNASSIGNED
    xxx37 0 p STARTED 94785 53.2mb xx.xx.xx.xx SVR1
    xxx37 0 r UNASSIGNED
    xxx12 0 p STARTED 7353 1.4mb xx.xx.xx.xx SVR1
    xxx12 0 r UNASSIGNED
    xxx8 0 p STARTED 49 37.2kb xx.xx.xx.xx SVR1
    xxx8 0 r UNASSIGNED
    xxx15 0 p STARTED 95865 17.2mb xx.xx.xx.xx SVR1
    xxx15 0 r UNASSIGNED
    xxx25 0 p STARTED 69036 18.6mb xx.xx.xx.xx SVR1
    xxx25 0 r UNASSIGNED
    xxx5 0 p STARTED 5508753 878.7mb xx.xx.xx.xx SVR1
    xxx5 0 r UNASSIGNED
    xxx19 0 p STARTED 11279557 2.7gb xx.xx.xx.xx SVR1
    xxx19 0 r UNASSIGNED
    xxx39 0 p STARTED 73 36.8kb xx.xx.xx.xx SVR1
    xxx39 0 r UNASSIGNED
    xxx11 0 p STARTED 7294 1.1mb xx.xx.xx.xx SVR1
    xxx11 0 r UNASSIGNED
    xxx4 0 p STARTED 44 22.5kb xx.xx.xx.xx SVR1
    xxx4 0 r UNASSIGNED
    xxx35 0 p STARTED 2453759 397mb xx.xx.xx.xx SVR1
    xxx35 0 r UNASSIGNED
    xxx40 0 p STARTED 0 208b xx.xx.xx.xx SVR1
    xxx40 0 r UNASSIGNED
    xxx10 0 p STARTED 40815 10mb xx.xx.xx.xx SVR1
    xxx10 0 r UNASSIGNED
    xxx30 0 p STARTED 8 19.4kb xx.xx.xx.xx SVR1
    xxx30 0 r UNASSIGNED
    xxx28 0 p STARTED 57 43.6kb xx.xx.xx.xx SVR1
    xxx28 0 r UNASSIGNED
    xxx38 0 p STARTED 19 23.8kb xx.xx.xx.xx SVR1
    xxx38 0 r UNASSIGNED
    xxx6 0 p STARTED 51 34.2kb xx.xx.xx.xx SVR1
    xxx6 0 r UNASSIGNED
    xxx16 0 p STARTED 0 208b xx.xx.xx.xx SVR1
    xxx16 0 r UNASSIGNED
    xxx18 0 p STARTED 242247 30mb xx.xx.xx.xx SVR1
    xxx18 0 r UNASSIGNED

Thank you very much.

2

Hello @Test123000

Welcome to the community.

What is the count of data nodes in your cluster?

GET /_cat/allocation?v=true

Looking at the information shared it seems you have 1 data node in your cluster because of which the replicas are Unassigned & Cluster is Yellow.

If you have more than 1 data node in your cluster & the shards are still unassigned than can check using below command :

GET /_cluster/allocation/explain

If you have 1 server (1 data node) than making settings replicas = 0 for these indices will make the Cluster health = Green.

Thanks!!